Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
File:                     jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft (raw, json)
Hash identifier:          1VyDawC/pUlLL7nlqGUEZJaXioc7eGLNbNivxcufFwk=
Subject key identifier:   97:46:C7:2A:80:84:06:3F:E9:C7:31:7E:91:CB:CB:90:A0:34:D6:66
Authority key identifier: 8E:79:CE:F4:58:DE:50:39:2E:3C:02:B6:91:82:F3:4C:60:14:8D:24
Certificate issuer:       /CN=8e79cef458de50392e3c02b69182f34c60148d24
Certificate serial:       019E2FCDBCF566DAEE2E47EB889C3649382A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
Manifest number:          02DF
Signing time:             Sat 16 May 2026 08:01:12 +0000
Manifest this update:     Sat 16 May 2026 08:01:12 +0000
Manifest next update:     Sun 17 May 2026 08:01:12 +0000
Files and hashes:         1: _c6xx4G9gRqlWT599mmQOoWoW50.roa (hash: c/9VJ4HKTN9Q4dyySRrDW6GfcNhn9tZLqvs7ju71Tx8=)
                          2: jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl (hash: X0bWK6wbH3bMKrmTqNxPRKJz1/e6YkrOyi7yIBQ2pEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 08:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:cd:bc:f5:66:da:ee:2e:47:eb:88:9c:36:49:38:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e79cef458de50392e3c02b69182f34c60148d24
        Validity
            Not Before: May 16 08:01:12 2026 GMT
            Not After : May 17 08:01:12 2026 GMT
        Subject: CN=9746c72a8084063fe9c7317e91cbcb90a034d666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:63:27:63:bd:29:ea:3b:71:98:b6:28:9e:0e:
                    83:d3:0a:2a:5d:1f:36:23:22:8a:fc:c8:ae:50:10:
                    be:85:5e:60:66:9a:5f:68:f6:83:92:bd:90:ce:83:
                    d2:e6:56:55:40:6c:47:a2:6d:12:62:9f:c7:0e:39:
                    1d:7e:ee:14:d7:09:25:94:38:76:36:1a:0b:7d:3f:
                    bd:15:26:8f:75:7a:dd:83:58:68:95:3e:ec:0e:b5:
                    f4:61:e5:68:28:93:11:94:a1:b0:8d:15:10:39:a9:
                    9d:a7:75:f6:78:9f:c7:fa:60:70:7a:5b:89:df:d2:
                    5a:df:da:2d:1f:c1:ec:e8:a1:3f:40:db:84:52:5a:
                    f0:33:03:9a:cd:c3:9f:66:24:da:50:19:0f:34:77:
                    ef:68:a6:15:6e:23:f8:ae:72:e2:4f:9f:e4:70:0d:
                    5d:f3:80:41:d5:a6:7c:3d:28:55:a0:11:38:2f:64:
                    05:28:9c:80:4a:d0:94:af:5c:02:48:37:0d:ae:6d:
                    d1:d1:1d:e9:80:b2:26:e9:2c:df:86:d8:6f:86:92:
                    31:4a:be:4c:7c:41:3b:b3:98:22:50:33:1c:1d:79:
                    af:7f:46:bc:f9:13:5f:5c:05:1a:65:13:37:0b:ed:
                    8a:e8:23:e4:c3:02:a8:bc:61:6d:3d:91:da:86:5b:
                    a8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:46:C7:2A:80:84:06:3F:E9:C7:31:7E:91:CB:CB:90:A0:34:D6:66
            X509v3 Authority Key Identifier:
                keyid:8E:79:CE:F4:58:DE:50:39:2E:3C:02:B6:91:82:F3:4C:60:14:8D:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:72:0e:f4:a4:7f:94:e1:f8:fd:9c:0c:df:00:12:b6:e0:8e:
         eb:ed:d8:8b:a1:ce:3b:29:ef:43:d4:20:d0:bd:c5:e2:4e:6f:
         99:cf:21:84:3c:6f:7e:53:ec:97:86:ce:d3:74:f6:fa:4a:00:
         c6:3d:1e:ab:bb:df:20:59:c8:9a:ed:08:ce:e6:c8:1e:e7:59:
         0d:14:26:91:55:2b:b4:7d:be:fa:c2:cf:4a:70:d1:d7:47:c5:
         5e:ab:7d:30:2a:f2:ab:f0:c6:23:47:17:4a:9d:d5:35:94:c0:
         2f:ec:9e:f3:d2:26:5e:a6:58:6c:4b:34:6a:b0:e9:bb:03:a8:
         f9:74:26:c3:6e:ba:24:06:92:f9:05:58:ac:ff:37:ad:24:68:
         5a:7a:7f:b1:f2:87:8e:91:33:31:67:56:66:a3:15:15:92:5f:
         e8:7b:2e:e7:ff:4a:ca:2e:e4:50:09:12:2c:04:62:7c:02:be:
         c2:e9:27:02:4a:9e:0c:c9:05:72:f7:6d:dc:83:b6:c8:22:19:
         be:b6:c4:2e:bb:81:d4:21:5d:df:f3:a7:0b:42:43:39:07:d5:
         34:99:44:81:ef:10:c1:a5:1c:c3:e6:17:30:55:0c:d8:08:a4:
         cc:39:b0:3f:3f:a5:5f:29:38:72:b3:b6:1e:e1:10:24:37:bd:
         f0:e0:8c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:40:54 2026 by rpki-client